Box Tools Internet Explorer Configuration Guide

Internet Explorer (IE) is unique among the browsers we support for Box Tools due to its complexity of configuration. This guide covers the most common IE configuration issues that can impact Box Tools. 

 

Note: Only IE 11 is supported by Box.

 

IE Security Zones

When reviewing the information below, it is important to understand IE's concept of Security Zones. IE uses Security Zones to categorize the websites visited in IE. Each Security Zone has its own set of security settings and policies. 

By default, IE will map Box's domains into the "Internet Zone". However, your organization may have configured IE to map Box's domains into a different zone such as the "Trusted Sites Zone" or the "Local Intranet Zone". Many of the settings below need to be configured in the Security Zone that the Box domains are mapped to. IE's Security Zones and settings can be accessed from the Settings (gear icon) > Internet Options > Security

 

Box Tools v3

Box Tools v3 requires the Box.com webapp to use https://edit.boxlocalhost.com to communicate with Box Tools. Please review the DNS and proxy requirements for Box Tools v3 first before reviewing the IE specific information below. 

 

 For Box Tools v3, two Box domains impact the Box Tools functionality: 

Requirement #1: the two domains above need to be mapped to the same IE Security Zone.

  • IE's default settings will map both *.box.com and edit.boxlocalhost.com into the "Internet Zone". However, if your organization chooses to add one of the domains to the "Trusted Sites Zone", the other domain should also be added to the "Trusted Sites Zone" so that both domains are in the same IE Security Zone.
  • It does not matter if the domains are mapped to the "Internet Zone" or the "Trusted Sites Zone" as long as they are in the same Security Zone. We do not recommend using the "Local Intranet Zone".

Requirement #2: "Access Data Sources Across Domains" setting needs to be Disable or Prompt

  • In the IE Security Zone that contains *.box.com and edit.boxlocalhost.com, the "Access Data Sources Across Domains" setting must be set to Disable or Prompt
  • This setting can be found in IE's Settings (gear icon) > Internet Options > Security > select the Security Zone that contains both domains > select Custom Level… > scroll down to "Access Data Sources Across Domains":
  • This "Access Data Sources Across Domains" setting is found in each Security Zone. Ensure you are modifying the Security Zone that the two Box domains are being mapped to. 

 

Requirement #3: Windows 8 or later only

  • Windows 8 or laterEnable Enhanced Protected Mode under IE's Settings (gear icon) > Internet Options > Advanced must be disabled (unchecked) in order for Box Tools v3 to function in IE 11
  • For Windows 7 environments, Enable Enhanced Protected Mode can be enabled with no functional issues for Box Tools v3. 

To summarize the requirements for Box Tools v3 and IE 11:

  • *.box.com and edit.boxlocalhost.com both need to be in the same IE Security Zone. IE 11's default settings should place both domains into the "Internet Zone".
  • For the IE Security Zone that contains both domains, the "Access Data Sources Across Domains" setting must to be Disable or Prompt
  • Windows 8 or later: Enable Enhanced Protected Mode must be disabled 

 

Box Tools v4

Box Tools v4 is an upcoming update to Box Tools and changes the IE setting requirements for Box Tools to function.

Most significantly, Box Tools v4 requires an Box Tools ActiveX Add-on to be installed and used in IE. For an overview of Box Tools v4 system requirements, please see https://community.box.com/t5/How-to-Guides-for-Managing/System-Requirements-for-Box-Tools-4-0-Box-Ed...

 

For Box Tools v4, IE's settings for the https://*.box.com domain can impact Box Tools v4's functionality. The https://edit.boxlocalhost.com domain is not used for Box Tools v4. 

 

Requirement #1: IE Security Zone settings for ActiveX controls

  • In the IE Security Zone that holds the https://*.box.com domain, the following settings need to enabled:
    • Run ActiveX controls and plug-ins
    • Script ActiveX controls marked safe for scripting
  • These settings can be found in IE's Settings (gear icon) > Internet Options > Security > select the Security Zone that contains the *.box.com domain > select Custom Level… > scroll down to the ActiveX controls and plug-ins section

Requirement #2: Group Policy settings for ActiveX Add-ons

  • Administrators may need to whitelist the Box Tools ActiveX Add-on depending on your Group Policy settings.
  • Under Computer Configuration\Policies\Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management, if the Deny all add-ons unless specifically allowed in the Add-on List setting is enabled, the Box Tools ActiveX Add-on will need to be added to the Add-on List (see steps below) or the Deny all add-ons unless specifically allowed in the Add-on List setting needs to be disabled. 
  • To add  Box Tools ActiveX Add-on to the Add-on List:
    1. Navigate to the Add-on Management portion of your Group Policy settings
    2. Right click on Add-on List, select Edit, click on Enabled, and select Show
    3. For Value name, enter {BA58190A-A733-4982-8AE2-E2021F0DD503} which is the CLSID for the Box Tools ActiveX Add-on. For Value enter 1 so the add-on is enabled and cannot be disabled by your end users. For more information on controlling IE add-ons via Group Policy, please see this articleimage8tools4.png

Requirement #3: Windows 8 or later only

  • Windows 8 or laterEnable Enhanced Protected Mode under IE's Settings (gear icon) > Internet Options > Advanced must be disabled (unchecked) in order for Box Tools v4 to function in IE 11
  • For Windows 7 environments, Enable Enhanced Protected Mode can be enabled with no functional issues for Box Tools v4. 

 

IEZoneAnalyzer

The IEZoneAnalyzer is a tool provided my Microsoft which can be used to determine a domain's IE Security Zone. Download the tool from http://blogs.technet.com/b/fdcc/archive/2011/09/22/iezoneanalyzer-v3-5-with-zone-map-viewer.aspx.

 

Clicking Zone Map Viewer will show which sitesare specifically assigned to which IE Security Zones, if any.

Entering a URL in the bar at the top and clicking Map URL to Zone will show which IE Security Zone the given URL currently falls into.

Version history
Revision #:
9 of 10
Last update:
‎01-18-2018 12:28 PM
Updated by: